b8b74f333daa57dbeda52707b8502bcaa45f74a2c8e7fc24d015d03ded62b919 | Triage

Sharing

General

Target

b8b74f333daa57dbeda52707b8502bcaa45f74a2c8e7fc24d015d03ded62b919
Size

304KB
Sample

221123-kw35lahg22
MD5

2c0042721f44e445a607222724275b4d
SHA1

7080f086eb2a562ac0417e4acced3643f96c59c5
SHA256

b8b74f333daa57dbeda52707b8502bcaa45f74a2c8e7fc24d015d03ded62b919
SHA512

cfc5c15cfb5ab53e55d7b9bd0ac7ce43487e357369a6ab42a3807530212cd74f0a174df7eb9bde0ea885cd47d7c8dd9830ce2546f9ada013d5b9fd5a63347d90
SSDEEP

6144:VrkW9uEo2S1YnQmCX492DkwNP3qpYF4AqqWb+qR9h+uqkNfoM6YV5TmNa1a3SyPi:Vrkuu6/eIo4tQW62T+uTwM6YVxm24fK

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  b8b74f333daa57dbeda52707b8502bcaa45f74a2c8e7fc24d015d03ded62b919
- Size
  
  304KB
- MD5
  
  2c0042721f44e445a607222724275b4d
- SHA1
  
  7080f086eb2a562ac0417e4acced3643f96c59c5
- SHA256
  
  b8b74f333daa57dbeda52707b8502bcaa45f74a2c8e7fc24d015d03ded62b919
- SHA512
  
  cfc5c15cfb5ab53e55d7b9bd0ac7ce43487e357369a6ab42a3807530212cd74f0a174df7eb9bde0ea885cd47d7c8dd9830ce2546f9ada013d5b9fd5a63347d90
- SSDEEP
  
  6144:VrkW9uEo2S1YnQmCX492DkwNP3qpYF4AqqWb+qR9h+uqkNfoM6YV5TmNa1a3SyPi:Vrkuu6/eIo4tQW62T+uTwM6YVxm24fK
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2